I might have a problem with svchost.exe. Sometimes it takes about 50% or more of cpu doing something for about 30min. Slows comp really bad, especially games. Is that normal? I have Norton internet security 2011 and everything is clean so I think it is not a virus. I solve the problem by shutting down process in windows task manager, but it is annoying me very much...

I am not sure why there are always so many svchosts, but I believe it is for reliability. If all of the core windows services were in one executable, and one component failed, then that would mean the entire operating system would blue screen and restart. Therefore, one would need to separate them. That way, if one component failed, the other ones would still be working, and the failed one might have a chance to restart.

If there is a svchost which changes its ram usage or CPU usage than it is camuflaged as a svchost, but in fact its a malware
Malware bytes lost its power since the svchost virus was modified and it cannot be catched even with update
try another anti-virus or malware cuz it is not as useful as it has been
It depends on which svchost date your system has catched it

If there is a svchost which changes its ram usage or CPU usage than it is camuflaged as a svchost, but in fact its a malware

Click to expand...

No. Srvhost is a container process for services that are launched from dynamically linked libraries (DLLs), and they are created to contain groups of similar services (ie. firewall services). They are created this way so that if one service goes rouge, it does not take out the other srvhosts that are running. Depending on the requirements of the DLL service(s) contained in a particular srvhost, the need for additional CPU time or RAM can change over time depending on what it is doing.

That being said, srvhost processes should not be using an inordinate amount of CPU cycles for long periods of time. You might remember the little bug that MS had to fix a few years back when certain srvhost processes were using 100% CPU time.

On occasion you may see a srvhost run amock and simply restarting the srvhost process will correct the issue. To alleviate unneeded service host processes, turn off services that you are not using.